This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft
File: 5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft (raw, json)
Hash identifier: vsId72YTeR7FU20PkZLDyvzipy/0+4Noz0vk3cI07H8=
Subject key identifier: 36:B6:13:01:AA:09:3B:5E:A3:A1:F3:E6:5B:03:D8:CA:80:22:70:AD
Authority key identifier: E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69
Certificate issuer: /CN=A916148F/serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569
Certificate serial: 02EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft
Manifest number: 02E8
Signing time: Sat 06 Dec 2025 23:49:52 +0000
Manifest this update: Sat 06 Dec 2025 23:49:51 +0000
Manifest next update: Sat 13 Dec 2025 23:49:51 +0000
Files and hashes: 1: 5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl (hash: yhoJPNvruYdqpp7Pr9ZhZklswquHrYJOxYJQTzFiHiw=)
2: E757164C074511EDB229157DC4F9AE02.roa (hash: onRdgGkpkgbRrilTwhd//fNz2yNBz6ru8beWXJE4ohY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl
rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 748 (0x2ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916148F, serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569
Validity
Not Before: Dec 6 23:49:51 2025 GMT
Not After : Dec 13 23:49:51 2025 GMT
Subject: CN=6934c11f-2b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fa:69:0b:b6:b5:72:72:26:26:52:b9:1f:f6:
67:7f:3d:43:8c:6b:dd:44:7d:25:bc:b7:03:7e:b6:
4f:c9:70:37:40:9f:c5:9d:34:f3:71:ca:a9:3e:33:
08:aa:19:7d:74:11:c5:a9:67:95:79:10:e5:bf:79:
15:86:d6:88:91:d7:e4:8d:12:cc:43:2a:31:97:43:
9d:fe:d6:d7:f3:58:e3:7a:94:62:bb:82:0d:40:f7:
ef:80:8e:0f:85:a1:3b:ad:6d:d7:67:98:0c:1d:4a:
96:63:2e:38:50:42:16:6d:7f:06:6a:19:69:11:8b:
33:81:f0:5a:9e:20:b5:2c:64:bd:4b:dd:a7:4e:5d:
78:c1:a7:1d:f5:d2:95:9d:1f:f2:f6:66:94:3d:0d:
04:6d:f3:b7:ce:6f:4c:60:4e:8a:96:8c:e2:a9:ab:
6b:da:46:0a:80:5e:ac:79:93:08:a7:8c:25:e5:8d:
87:92:a5:11:1b:aa:aa:54:57:f5:ab:fc:5a:36:6b:
5c:b4:18:3f:01:c4:b4:84:49:4a:54:26:98:84:8e:
26:e6:75:0f:56:97:4b:18:a7:bc:fe:b8:10:5a:2a:
90:c7:80:a5:56:03:3a:08:85:fd:ae:67:17:0e:f5:
2d:bd:b7:c4:b4:b7:c2:ce:98:f4:08:1e:45:f0:ac:
b0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B6:13:01:AA:09:3B:5E:A3:A1:F3:E6:5B:03:D8:CA:80:22:70:AD
X509v3 Authority Key Identifier:
keyid:E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:af:98:2f:06:9a:21:ae:d6:48:35:17:f7:56:5f:4e:b7:7d:
a3:74:51:e2:19:76:9b:2c:02:05:af:a6:ac:e0:59:58:ee:14:
9d:9e:3a:cc:49:30:dd:d3:ee:12:97:8c:f9:12:a2:6e:0d:f4:
1a:a5:ce:74:e8:f3:1e:03:ac:1b:52:84:c7:00:24:64:97:bb:
0b:61:61:8c:09:1c:9f:b3:26:95:ec:90:80:68:93:56:29:64:
44:37:0e:31:a3:8b:05:5e:fb:9a:91:c9:37:f4:9a:88:09:a3:
b3:81:f1:30:59:22:57:c6:dd:b9:ab:f4:9b:18:9e:04:58:07:
4c:68:24:15:d5:b9:51:9d:77:dd:70:1b:3f:6b:41:40:65:a8:
a5:2c:3f:7a:df:41:3f:53:33:c4:83:24:be:2a:33:9d:58:70:
bf:26:86:93:47:ca:66:90:e3:4d:d0:de:ac:26:73:22:6a:b7:
8e:dd:54:ca:fa:4e:eb:ee:a0:d8:c5:dd:f9:22:28:a1:b4:ab:
b6:98:54:f5:28:3a:15:9b:a7:6d:90:96:33:b7:27:71:8c:11:
7c:33:98:ba:34:65:c9:e5:48:3e:03:02:81:da:2b:d8:b0:ef:
29:84:01:03:f2:ff:86:5c:91:25:5e:ae:78:bf:3a:ce:b4:d2:
b7:65:84:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:51:27 2025 by rpki-client